When you use the Event Viewer (Eventvwr.msc) to view an event detail, you can copy the event to the clipboard by
pressing the 
(Copy to Clipboard) icon
on the Event Properties Event tab.
Here is a sample event I pasted:
Event Type: Success Audit
Logon Process Name: KSecDD
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Source: Security
Event Category: System Event
Event ID: 515
Date: 02/22/2004
Time: 06:37:30
User: NT AUTHORITY\SYSTEM
Computer:
Description:
A trusted logon process has registered with the Local Security Authority. This logon process will be trusted to submit logon requests.
0 comments
Hide comments
